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WHAT IS CLAIMED IS: 

I.Na method for measuring network performance, comprising: 
dividing packets flowing through a first point into fi-ames, the first point being any 
point in the natwork that supports a packet flow; 

capturing information about the packets in packages that correspond to the fi-ames; 
\ correlating each package with packets flowing through a second point, the second 

point being any point in the network that supports the packet flow; and 

calculating iibtwork performance information based on the correlated packages. 



10 2. The method of claim 1, wherein the dividing step comprises: 

selecting a header associated with the packets flowing through the first point; 

associating the header with the packet flow; and 

storing the header in a storage associated with the packet flow. 

15 3. The memod of claim 2, wherein the dividing step further comprises: 

incrementing a packet count; and 
detecting duplicate packets. 

4. The method of claim 3, wherein the detecting step comprises searching in the 
20 storage for another header that matches the selected header. 

5. The method of claim 3, wherein a duplicate packet coxmt is incremented when a 
duplicate packet is detected. 

25 6. The method of claim 2, wherein the storing step is repeated to form a sequence 

of headers in the storage. 

7. The method of claim 6, wherein the step of storing the header fiirther comprises: 
storing header order of capture information in a second storage associated with the 
30 selected header. 
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8. The method of claim 6, wherein the headers in the storage are stored in the form 
of a hash table data structure. 

9. Th^^^^d of claim 1, wherein the packets are Intemet Protocol packets. 

10. me method of claim 1, wherein the step of capturing information comprises: 
retrievmg consecutive headers from a frame; and 

formin^a package including information that uniquely identifies consecutive 
ackets corresponding to the consecutive headers. 

1 1 . The method of claim 1 0, wherein the step of forming a package fixrther 
comprises: 

setting the package size to represent the number of packet headers in the package. 

15 12. '^he method of claim 10, wherein the step of forming a package fiirther 

comprises: 

selecting a source information, a destination information, an Intemet Protocol 
identifier, a fragirbnt flag, and a fragment offset from each packet in the package as the 
information that imt^uely identifies consecutive packets corresponding to the consecutive 
20 headers 

13. The method of claim 10, wherein the step of retrieving consecutive headers 
fiirther comprises: 

assigning a time stamp and locally-generated sequence number to each of the 
25 consecutive headers. 

14. The method of claim 10, wherein the step of retrieving consecutive headers 
fiirther comprises: 

retrieving last n headers in the frame, n being an integer number. 

30 

15. The method of claim 1, fiirther comprising: 
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storing in a storage a header associated with the packets flowing through the 
second point. 

16. The method of claim 15, wherein the storing step comprises: 
selecting the header; 

associating the header with the packet flow; and 

storing the header in a storage location associated with the packet flow. 

17V The method of claim 16, wherein the step of storing the header further 
comprises: \ 

incrementing a packet count; and 
detecting duplicate packets. 

18. The method of claim 17, wherein the detecting step comprises: 
searching in the storage for another that matches the selected header. 

19. The method of claim 17, wherein a duplicate packet count is incremented 
when a duplicate packet is detected. 



20. The method of claim 15, wherein the step of storing the header in a storage 
location is repeated to form a sequence of headers in the storage and further comprises: 

storing header order of capture information in a second storage, the second storage 
being associated with the selected header. 

21. Tha method of claim 1, wherein the correlating step comprises: 
associating each package with the packet flow; 

searching for a match between packet information selected in each package and 
stored header information corresponding to the packet flow; and 
calculating a destination frame size. 
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22. The method of claim 21, wherein the step of calculating a destination frame 
size comprises: 

detemiining a number of packets in between a match of a previous package and a 
match of a present package. 

23. The method of claim 21, wherein the searching step comprises examining a 
nimiber of stored packet headers in the storage. 

24. The method of claim 1, wherein the step of calculating network performance 
comprises: 

determining a number of packets lost between the first point and the second point 
in the network. 

J ^ 2^ The method of claim 24, wherein the step of determining the number of 
packets losV comprises: 

determining a source frame size from a correlated package; 

calculamng a destination frame size; 

subtractiM the destination frame size from the source frame size; and 

adding a nmmber of duplicate packets generated between the first point and second 

point in the networw to the subtraction of the destination frame size from the source frame 

size. \ 

26. The method of claim 1, wherein the step of calculating network performance 
comprises: 

determining a delay experienced by a packet flowing from the first point to the 
second point in the network. 

27. The method of claim 26, wherein the step of determining the delay comprises: 
determining a first time at which a packet associated with a correlated package 

flows through the first point in the network; 
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determining a second time at which the packet flows through the second point in 
the network; and 

subtracting the first time fi-om the second time. 

5 28\ The method of claim 1 , wherein the step of calculating network performance 

cogjprises:* 

calculating a number of duplicate packets created between the first point and the 
econd point^ 

10 29. The method of claim 28, wherein the step of calculating the number of packet 

duplicates comprises: 

counting duplicate packets at the first point; 
counting duplicate packets at the second point; and 

subtracting the count of duplicate packets at the first point firom the count of 
1 5 duplicate packets at the second point. 

3^SL A method for measuring network performance, comprising: 
retneving packet headers fi'om a first class of packets at a first point in the network, 
the first point being any point in the network that supports a flow of either the first class of 
20 packets or a second class of packets carrying information corresponding to the packets of 
the first class; 

selecting jacket headers retrieved at the first point that correspond to a packet 

flow; 

maintaining 4 first header storage to store the selected headers as the first class of 
25 packets flow through the first point; 

retrieving packemieaders fi'om the first class of packets at the second point in the 
network, the second point>being any point in the network that supports a flow of either the 
first class of packets or the second class of packets; 

selecting packet headeli^s retrieved at the second point that correspond to the packet 

30 flow; 
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I laintaining a second header storage to store the selected headers as the first class 
of packets flow through the second point; 

crbating a package including information from the first header storage; 

sending the package to a monitor associated with the retrieval of packet headers at 
the second point; 

chelating the package with information from the second header storage; and 
calculating network performance information using a result of the correlation. 

' \ 

3 1 . A system for measuring network performance comprising: 
^ ■ ' at least a fi\st and a second monitoring device for monitoring packets associated 
with a plurality of packet flows and connected to any point in the network; and 

at least a first smd a second processing device for determining network performance 
information, each processing device respectively connected to each of the first and second 
monitoring devices. 



32. The system of claim 31, wherein the first processing device comprises a source 
device that diviops packets\acceased via the first monitoring device into frames and 
captures information about packets in packages corresponding to the frames; and the 
second procfessingjde^^T^e a destination device that correlates each package with 

packets accessed viathe^econd\nonitoring device and that calculates the network 
performance information oased on^^the correlated packages; wherein the monitoring 
devices monitor a packk flow from l^ie plurality of packet flows. 



33\ The system of claim 32, wherein the source device includes a processor for 



selecting a meader associated with the packets accessed via the first monitoring device, for 
associating the header with the packet flow, and for storing the header in a storage. 



34. Th^ system of claim 32, wherein the captured information about the packets 
comprises: 

source infdrmation; 
destination iVformation; 
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an Internet Protocol identifier; 
a fragment offset; and 
a fragment flag. 



5.\t1 



35. \ The system of claim 32, wherein the packages include running duplicate 
packet counV locally-generated sequence number, and locally-generated time stamp 
information for each packet in the package. 



36. ThAsystem of claim 32, wherein the packages include a packet flow identifier, 

measuiing performance of a network, said method comprising 

; through a first point into frames, the first point being any 
5orts a packet flow; 
^about the packets and the frames; 
correlating the iuDllecteM information with packets flowing through a second point, 
the second point b^ng aiay poin\ in the network that supports the packet flow; and 

calculating m^e performance of the network based on the correlated information. 

38. A method for measuring performance of a network, said method comprising 
the steps of: 

dividing packets flowing through a first point into frames, the first point being any 
point in the network that supports a packet flow; 

receiving information about the packets and the frames; 

correlating the received information with packets flowing through a second point, 
the second point being any point in the network that supports the packet flow; and 

calculating the performance of the network based on the correlated information. 

39. The method of claim 38, wherein the step of receiving information comprises: 
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receiving packages that correspond to the frames and that include information 
about the packets and the frames. 

4Q. A method for measuring performance of a network, said method comprising 
the steps oIe 

divickng packets flowing through a first point into frames, the first point being any 
point in the network that supports a packet flow; and 

capturimg information about the packets and frames, such that the information is 
correlated with Rackets flowing through a second point in the network that supports the 
packet flow. _ \ 

mod of claim 40, wherein the step of capturing information comprises: 
fomiation about the packets in packages that correspond to the frames. 
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